cloud: "device" and cloud: "skip" parse today but belong to the device-hooks subsystem that is off.
Hook entries in settings can carry cloud: "device" or cloud: "skip". A hook whose script lives somewhere the cloud session can write, such as the checkout or a synced directory, is withheld unless the entry is explicitly marked cloud: "device"; cloud: "skip" keeps it local. Part of the device-hooks subsystem that is switched off in this build.
- A
cloud: "device"mark is ignored when it comes from.claude/settings.local.jsoninside the checkout. - Forwarded scripts are pinned by SHA-256 and re-checked before every run; a script that changed, moved or has multiple hard links is refused with a stated reason.
- Limits: 128 forwarded hook entries, a 180 second registration lease, and roughly 1 MiB of hook input before a PreToolUse call is denied.
is marked cloud: "skip" (or a value this version does not recognise) and stays on this machine.
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
| `ca_bundle` | string (absolute path) | unset | PEM file added to the app's default TLS trust for sign-in, the Claude API, Anthropic-hosted connectors, update checks, and [cloud storage](/docs/claude-science/cloud-storage) access from Set…claude-science/configuration-file-reference see the edit
A Windows update released September 8, 2026 (including KB5124008) stops Cowork from reaching your files when it runs on your Windows PC, so tasks fail or the workspace does not start. This affects Cowork on third-party inference deployment…cowork/changelog see the edit
A small documentation edit on Changelog touched a line naming cloud after this was published.